The fact that this was included in the OS without raising alarms is quite revealing in terms of privacy concerns.

Question, is there a good justification to use not use hierachical certificates like web browsers or other OSes ?